If it is a well known extension i will trust it, but often i find myself to extract the extension and Look at the "source code" if it is not open source.